dependabot-uv 0.380.0 → 0.381.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f3b4c4b6a4b3763d4433341d1701c472a991315fb9cb30d6cdbc1b1401fc9232
-  data.tar.gz: 73d2e249b54aa9c849dd4c7cf88bf1586af43122b020cc2e4f2d27ce60225356
+  metadata.gz: 34812d487d1efef68f06ec5410de289820633662674188962fce43e27a3ed169
+  data.tar.gz: d5ae7d9564f1f64f92c3b6b1de39c28d9d5fe58c8480ced385b35b7baa56affb
 SHA512:
-  metadata.gz: 7fb68d3a6c4668894905f961b7b02a9ba8e5ae26bca1d23e245cc5bd77da2e48bb3e004bfb1a3d233d5cc459f7c338ec2cf568d8f3a4019e62fde896c282e7d2
-  data.tar.gz: 35d5bfefbcaaa09a71798e6fda30c2e26beb23c3c5e62090ed0fcc8a45b126a0f2537b56206e3565fe2e43fe31cc9e8dfc9c5ce0c372f6f392f9e47c881c34f2
+  metadata.gz: e5fa6c65e7d20b4361aeac44eba7fec0f754967d17f048ebcfa4a7612f219c2fa965384c108d766ee53cf5b1fdf918c2bdfc920061d6f953bc1e4a82e1ab43dd
+  data.tar.gz: 523a44b91c088a6158e0d7fd11a91d35f01914233eef1709102a28a63806d7b26609bc27da53b09a2b4c4b05a96157f7a953848a1844ebcc2665f6f072f4222f

data/lib/dependabot/uv/file_parser/pyproject_files_parser.rb

@@ -53,7 +53,7 @@ module Dependabot
 
         sig { returns(Dependabot::FileParsers::Base::DependencySet) }
         def poetry_dependencies
-          @poetry_dependencies ||= T.let(parse_poetry_dependencies, T.untyped)
+          @poetry_dependencies ||= T.let(parse_poetry_dependencies, T.nilable(Dependabot::FileParsers::Base::DependencySet))
         end
 
         sig { returns(Dependabot::FileParsers::Base::DependencySet) }
@@ -288,16 +288,19 @@ module Dependabot
           NameNormaliser.normalise(name)
         end
 
-        sig { returns(T.untyped) }
+        sig { returns(T::Hash[String, T.untyped]) }
         def parsed_pyproject
-          @parsed_pyproject ||= T.let(TomlRB.parse(T.must(pyproject).content), T.untyped)
+          @parsed_pyproject ||= T.let(TomlRB.parse(T.must(pyproject).content), T.nilable(T::Hash[String, T.untyped]))
         rescue TomlRB::ParseError, TomlRB::ValueOverwriteError
           raise Dependabot::DependencyFileNotParseable, T.must(pyproject).path
         end
 
-        sig { returns(T.untyped) }
+        sig { returns(T::Hash[String, T.untyped]) }
         def parsed_poetry_lock
-          @parsed_poetry_lock ||= T.let(TomlRB.parse(T.must(poetry_lock).content), T.untyped)
+          @parsed_poetry_lock ||= T.let(
+            TomlRB.parse(T.must(poetry_lock).content),
+            T.nilable(T::Hash[String, T.untyped])
+          )
         rescue TomlRB::ParseError, TomlRB::ValueOverwriteError
           raise Dependabot::DependencyFileNotParseable, T.must(poetry_lock).path
         end

data/lib/dependabot/uv/file_updater/compile_file_updater.rb

@@ -177,7 +177,6 @@ module Dependabot
           end
         end
 
-        # rubocop:disable Metrics/AbcSize
         sig do
           params(updated_files: T::Array[Dependabot::DependencyFile]).returns(T::Array[Dependabot::DependencyFile])
         end
@@ -193,19 +192,24 @@ module Dependabot
           files = dependency_files
                   .reject { |file| updated_filenames.include?(file.name) }
 
-          args = T.must(dependency).to_h
-          args = args.keys.to_h { |k| [k.to_sym, args[k]] }
-          args[:requirements] = new_reqs
-          args[:previous_requirements] = old_reqs
+          dep = T.must(dependency)
 
           RequirementFileUpdater.new(
-            dependencies: [Dependency.new(**T.unsafe(args))],
+            dependencies: [Dependency.new(
+              name: dep.name,
+              version: dep.version,
+              requirements: new_reqs,
+              package_manager: dep.package_manager,
+              previous_version: dep.previous_version,
+              previous_requirements: old_reqs,
+              directory: dep.directory,
+              subdependency_metadata: dep.subdependency_metadata,
+              removed: dep.removed?
+            )],
             dependency_files: files,
             credentials: credentials
           ).updated_dependency_files
         end
-        # rubocop:enable Metrics/AbcSize
-
         sig do
           params(
             cmd: String,

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-uv
 version: !ruby/object:Gem::Version
-  version: 0.380.0
+  version: 0.381.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,28 +15,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.380.0
+        version: 0.381.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.380.0
+        version: 0.381.0
 - !ruby/object:Gem::Dependency
   name: dependabot-python
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.380.0
+        version: 0.381.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.380.0
+        version: 0.381.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -302,7 +302,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.380.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.381.0
 rdoc_options: []
 require_paths:
 - lib